Terms of Service

1. Acceptance of Terms & Eligibility

Welcome to Biogistry ("Platform", "we", "us", or "our"). By accessing or using the Biogistry website, clinical pedigree builder, risk engines, Punnett square calculator, chromosome idiogram renderer, or related services (collectively, the "Services"), you agree to be bound by these Terms of Service ("Terms").

If you are accepting these Terms on behalf of a healthcare institution, clinic, research organization, academic facility, or other legal entity, you represent and warrant that you have full legal authority to bind such entity to these Terms. If you do not agree to these Terms, you must immediately cease accessing or using the Services.

2. Clinical Workbench Scope

Biogistry provides a browser-native clinical genetics suite designed for genetic counselors, clinical geneticists, medical researchers, and healthcare professionals. The Services include tools for visual pedigree charting, clinical record organization, FHIR bundle conversion, Mendelian inheritance calculation, multi-model risk assessment (Claus, Gail, Lynch, Chompret, PancPRO, Hereditary Ovarian/Prostate, Carrier Screening), and HPO phenotype annotation.

Biogistry operates primarily as a browser-native, local-first platform. Data created or modified within the workbench is stored directly in your web browser's local storage mechanisms (such as IndexedDB and localStorage) or saved to local file directories under your control using browser File System Access APIs.

3. Clinical Decision Support & Medical Disclaimer

Biogistry integrates peer-reviewed, empirically validated risk algorithms and genetic calculation engines (including Claus Breast Risk, Gail Model, PREMM5 Lynch Syndrome, Chompret LFS, PancPRO, Hereditary Ovarian/Prostate, ACMG Carrier Screening, Mendelian/Bayesian Peeling, and Punnett probability grids). All output scores, risk percentages, and inheritance likelihoods are generated strictly for professional clinical decision support, research reference, and educational evaluation.

Clinical Decision Support Scope & Empirical Model Nature: Statistical risk models evaluate mathematical probabilities derived from published cohort studies and population-level clinical data. Risk estimates depend directly upon the completeness, accuracy, and lineage structure of the clinical data entered by the user, and cannot substitute for comprehensive molecular diagnostic testing, multigene panel sequencing, or individualized clinical evaluation.

Clinician Responsibility & Autonomous Medical Judgment: Licensed healthcare professionals using the Platform retain sole, independent professional responsibility for:

• Reviewing the clinical accuracy, pedigree completeness, and relevant patient medical history prior to clinical reliance.
• Ordering appropriate diagnostic procedures, confirmatory genetic testing, and laboratory evaluations.
• Making all final diagnostic interpretations, risk communications, surveillance schedules, and patient treatment management decisions.

Biogistry disclaims all liability for medical management choices, diagnostic decisions, or clinical interventions made by healthcare providers relying on Platform decision support tools. Non-clinician users must consult a qualified, licensed medical professional or certified genetic counselor regarding personal health questions or genetic test results.

4. Zero-Knowledge Calculation Audit Receipts (ZKAR) & Cryptographic Non-Repudiation

Non-Repudiation Architecture: When a user initiates a calculation (including but not limited to Claus Model, Gail Model, Lynch Syndrome, Chompret LFS, PancPRO, Hereditary Ovarian/Prostate, ACMG Carrier Screening, Mendelian/Bayesian Peeling, Family Relations, or Inheritance Pattern Detection), the Platform computes a SHA-256 cryptographic digest over the concatenated canonical input payload, output results, and a cryptographically secure random 256-bit salt:

Cryptographic Digest = SHA-256( CanonicalInputJSON ∥ CanonicalOutputJSON ∥ 256-Bit Salt )

Conclusive Evidentiary Proof: User agrees that the resulting SHA-256 hash, receipt ID, timestamp, and salt constitute conclusive, irrebuttable mathematical proof of: (a) the exact software algorithm version executed; (b) the exact quantitative input values submitted by the user at that precise millisecond; and (c) the exact mathematical calculation output produced by the Platform therefrom.

Separation of Clinician PII vs Patient PHI: Audit receipts logged to server endpoints retain strictly transactional and clinician identity metadata (Receipt UUID, SHA-256 Digest, Salt, Model ID, Version, Clinician OAuth Email, Clinician Name, Organization ID, Client IP, and Timestamps). The Platform stores absolutely zero patient Protected Health Information (PHI) within this audit record, ensuring the infrastructure remains entirely decoupled from patient data and fully compliant with HIPAA, HITECH, and GDPR.

User Sole Custody & Absolute Burden of Evidentiary Proof: Because patient input payloads and cryptographic salts are executed strictly within the local client sandbox and are NEVER stored on Biogistry servers, the clinician and healthcare entity retain sole custody and legal responsibility for preserving exported reports (PDF, HTML, or EHR exports) containing the exact Input JSON and Salt.

Strict Rejection of Verbal Claims & External Exceptions: In any legal dispute, medical malpractice claim, administrative audit, or clinical review alleging software miscalculation, engine malfunction, or erroneous risk estimates:

• The clinician and healthcare entity are strictly required to produce the exact matching Salt and Input JSON that reproduces the server-indexed SHA-256 digest.
• Biogistry shall UNDER NO CIRCUMSTANCES accept verbal statements, unverified memory, informal assertions, sworn affidavits without matching salts, external electronic notes lacking matching salts, or any unverified third-party claims.
• NO EXCEPTIONS shall be granted for stolen, lost, corrupted, or deleted PDF/EHR reports, compromised local storage, hardware failures, forgotten files, or EHR system wipes.
• In the event the user fails to produce the exact matching Salt and Input JSON that reproduces the indexed SHA-256 digest, the calculation executed by the Platform shall be deemed conclusively accurate, non-repudiable, and fully verified, and Biogistry shall be automatically and irrevocably released from all liability.

5. Local Backups & Zero-Knowledge AES-GCM 256 Encryption

Biogistry operates under a strict Zero-Knowledge Architecture regarding your Master Password. Your Master Password is derived and applied strictly within your browser sandbox. Biogistry central servers NEVER receive, transmit, store, or possess knowledge of your Master Password.

User Sole Responsibility & Risk of Data Loss: Because Biogistry has zero knowledge of your Master Password, we cannot recover, reset, or restore lost Master Passwords. You assume 100% full responsibility for any data loss, permanent loss of access, or data breach resulting from:

• Forgetting or losing your Master Password.
• Handing out or revealing your Master Password to unauthorized individuals.
• Device theft, hardware corruption, or unrecoverable local file corruption.

6. Real-Time Collaboration & Zero Liability Notice

Biogistry provides a zero-knowledge encrypted transit relay for real-time collaboration. Collaboration invite links contain end-to-end AES-256-GCM room decryption keys embedded in the URL fragment.

User Sole Responsibility & Data Breach Liability (No Exceptions): You (and your Covered Entity organization) bear the sole, total, and exclusive legal responsibility and liability for any data breach, inadvertent disclosure, or unauthorized PHI access — whether health data sits on your local device, recipient devices, or leaves user environments by any means. Biogistry assumes ZERO LIABILITY with no exceptions.

7. External Connectors & Third-Party Integrations (Zero Liability)

Biogistry provides technical connectors that allow users to export or synchronize workspace snapshots to user-managed external cloud storage or custom FHIR webhooks.

Plaintext vs Encrypted Snapshots: Snapshot files uploaded to third-party external connectors are generated in plaintext by default unless you explicitly enable Master Password encryption for snapshots. To encrypt and decrypt snapshot data across external devices, you must create and maintain your Master Password, and managing this password remains your sole responsibility.

8. Subscriptions, Payments & Core Infrastructure Providers

Merchant of Record & Payment Processing (Polar.sh & Stripe): Subscription management, checkout transactions, tax compliance, and billing lifecycle services are provided by Polar.sh Inc. as our official Merchant of Record. Polar's financial checkout infrastructure operates on top of Stripe. By purchasing a subscription (Professional or Enterprise), you agree to Polar.sh's Terms of Service and Privacy Policy. Payment card data is processed directly by Polar.sh and Stripe under PCI-DSS Level 1 security. Neither Polar.sh nor Stripe receives, stores, or processes Protected Health Information (PHI).

Application Hosting & Database Storage (Cloudflare): Platform application logic, serverless edge compute, user account tables, and audit receipt logs are hosted on Cloudflare Workers, Cloudflare Pages, and Cloudflare D1 (SQLite). Cloudflare provides global infrastructure availability, encryption in transit, and DDoS protection. Zero Protected Health Information (PHI) is hosted or stored on Cloudflare servers.

Transactional Email Delivery (Resend): Account sign-in magic links, security notifications, and billing confirmations are delivered via Resend. Resend processes recipient email addresses solely for transactional email dispatch and does not store or process patient health data (PHI).

Infrastructure Purpose Guarantee: These third-party infrastructure providers exist strictly to enable seamless billing, transaction processing, reliable email communications, software availability, and high performance. None of these providers store or process patient health records (PHI).

9. Cookieless Telemetry, Aggregated Analytics & In-App Isolation

To monitor platform availability, detect infrastructure bottlenecks, and improve service performance, Biogistry utilizes Umami, a privacy-preserving, cookieless telemetry solution.

Aggregated Telemetry Only: Umami operates without persistent cookies, device fingerprinting, or cross-domain tracking. Telemetry collected across our public pages, educational resources, blog posts, and free interactive tools is restricted strictly to aggregate technical metrics (such as page view volume, generic referrer domains, and browser runtime environment).

Strictly Never Your Data: Telemetry is never used to collect, inspect, monetize, or profile your personal data, clinical calculations, or Protected Health Information (PHI).

Absolute /app Workspace Isolation: While inbound clicks directing users toward the workspace application (/app) are tracked in aggregate to measure referral channels, all activity, patient records, charts, and interactions occurring inside the /app workspace are strictly excluded from telemetry and never tracked. All workbench activity operates within a zero-knowledge, local-first sandbox solely to preserve clinical confidentiality.

10. Platform Audit Logging & Compliance Recordkeeping

To satisfy statutory compliance, fraud prevention, and legal safety mandates, Biogistry records immutable platform audit logs when users execute external connectors, acknowledge legal/BAA terms, configure security settings, or generate calculation receipts.

Audit Log Contents: Audit logs record the user's full name, registered email address, institutional organization details, timestamp, IP address, receipt UUID, SHA-256 digests, and exact connector configuration events.

Minimum 7-Year / Indefinite Retention: Compliance audit logs and cryptographic ZKAR receipts are retained for a minimum of seven (7) years or indefinitely at Biogistry's discretion for legal defense, non-repudiation verification, and auditability.

Exclusion from Right to be Forgotten: While account deletion removes active user profiles and onboarding preferences, platform audit log records and cryptographic calculation non-repudiation receipts confirming user inputs, security authorizations, and legal consents are strictly EXCLUDED from account deletion / right to be forgotten requests and will be permanently retained.

11. Help & Feedback Support Portal (Strict No-PHI Policy)

Support messages and feedback submissions are transmitted to and stored in plaintext on our secure cloud servers so that the Biogistry engineering and support team can review suggestions and resolve technical issues. You agree never to include real patient health data or identifiable clinical cases in support tickets.

12. Onboarding Data & Testimonial Protection

Onboarding information (such as your full name, professional role, email address, and healthcare organization) is collected and stored securely in our database for account management and role-tailored features.

Testimonial Guarantee: Biogistry applies strict data security controls to ensure your Personally Identifiable Information (PII) is never leaked or shared. We will NEVER publish, display, or use your name, photo, or organization details as a public testimonial or marketing showcase without your explicit, written permission.

13. Acceptable Use Policy

You agree not to use the Services to:

• Violate any applicable federal, state, local, or international health privacy laws (including HIPAA, HITECH, GDPR, or state medical records privacy statutes).
• Submit real patient PHI into unencrypted feedback or support channels.
• Attempt to reverse-engineer, decompile, or extract the platform's proprietary risk calculation engines without written permission.
• Tamper with, forge, or alter cryptographic non-repudiation audit receipts or SHA-256 digests.
• Transmit malware, malicious scripts, or attempt unauthorized access to external connectors or infrastructure.

14. Warranty Disclaimer & Limitation of Liability

THE SERVICES ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

BIOGISTRY DOES NOT WARRANT THAT BROWSER LOCAL STORAGE WILL NEVER BE ERASED BY BROWSER CACHE-CLEARING ACTIONS. BIOGISTRY DISCLAIMS ALL LIABILITY FOR DATA LOSS RESULTING FROM FORGOTTEN MASTER PASSWORDS OR UNENCRYPTED EXTERNAL CONNECTIONS.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL BIOGISTRY BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES (INCLUDING LOSS OF DATA, LOSS OF PROFITS, OR PATIENT CARE DISRUPTIONS) ARISING OUT OF YOUR USE OF THE SERVICES.

15. Governing Law & Contact Information

These Terms shall be governed by and construed in accordance with applicable laws, without regard to conflict of law principles.

If you have any questions, concerns, or legal notices regarding these Terms, please contact us at:

Biogistry Legal & Compliance Team
Email: hello@biogistry.com
Website: biogistry.com